Описание
A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.htmlProductThird Party Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- https://www.sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.htmlProductThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:simple_college_project:simple_college:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04247
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel.
EPSS
Процентиль: 89%
0.04247
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-89